
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/116c31e0-7134-398d-9378-b0b11f8b1798.roa
File: 116c31e0-7134-398d-9378-b0b11f8b1798.roa (raw, json)
Hash identifier: xpvhDUW7rNPAotEYQ3nmjdFcsG8fVjRI8SyDOF/MZoQ=
Subject key identifier: 67:56:F3:7A:C1:6C:38:09:A7:80:E1:72:73:42:26:79:94:B6:2C:0B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B22DFF9F80CBBE47D6BF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/116c31e0-7134-398d-9378-b0b11f8b1798.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 76.116.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:22:df:f9:f8:0c:bb:e4:7d:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=48ed01cd-abe1-46cf-89a1-c5b86476b650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:4e:54:bb:86:06:b0:dd:ff:5f:40:91:ca:
d5:a7:7a:05:d8:4f:45:27:ad:ec:9b:67:47:1a:26:
e2:0e:02:a4:f6:bb:8f:f1:ba:4b:a3:f5:39:44:c3:
45:8c:e2:b4:85:a0:91:ef:72:c5:18:60:cc:7a:5b:
ff:4e:8e:2c:58:80:e8:09:6e:56:b1:06:e3:76:c1:
02:0c:b0:f6:fb:76:47:e8:2d:56:10:da:ea:1f:31:
00:c1:d0:da:8a:1b:74:d3:cc:59:ba:13:79:56:b0:
7b:30:11:b5:3d:95:90:2f:84:76:5f:73:83:0c:1a:
7a:11:24:1a:6e:5a:a1:61:36:17:58:ec:9e:67:2f:
ec:37:ca:a1:f8:08:8e:6e:27:46:c5:23:07:03:80:
13:87:aa:11:2f:e2:54:b5:89:3f:c1:b8:af:01:fd:
bd:4d:c5:23:81:01:fa:66:9d:68:0d:b7:5c:4c:c8:
f1:e6:c9:c9:af:ff:df:9a:ae:d3:5f:8b:dd:2b:e9:
f6:68:03:16:27:b2:05:7d:57:73:62:60:0e:d9:52:
a9:5c:c7:fa:30:97:77:d2:0e:3c:7c:a3:98:b0:20:
8d:a6:b6:c5:c3:c9:fc:ad:0d:f0:8a:35:d7:b2:e3:
26:45:d9:31:ec:d5:74:73:48:6b:67:94:37:2c:38:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:F3:7A:C1:6C:38:09:A7:80:E1:72:73:42:26:79:94:B6:2C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/116c31e0-7134-398d-9378-b0b11f8b1798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.116.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b9:58:1c:05:7d:3e:64:0e:dc:13:bf:40:df:54:84:5b:45:
99:44:5e:1f:74:cd:28:c4:05:6c:4c:5d:b7:e3:0a:7c:32:18:
a2:b6:a9:f7:57:e6:f4:f2:f0:d9:57:5e:3c:6c:59:a5:41:61:
c8:b7:0e:fa:7b:df:6b:fd:c8:9e:b7:33:6f:e1:ec:b2:f8:a2:
83:40:f7:64:1b:0e:d7:17:11:1f:30:96:ad:91:dd:9b:13:0b:
be:5d:41:18:dd:a6:8e:3b:ba:8e:a2:d3:86:15:12:4e:ea:30:
24:f4:43:37:5f:2d:0c:9a:bf:53:bf:6a:e4:aa:87:d9:9c:e4:
f5:52:4a:f5:54:e2:58:d3:6e:b1:97:fb:82:6c:25:79:1f:72:
a6:96:fe:04:5c:9f:8c:f9:74:7d:fd:ad:70:4e:49:df:90:f4:
e8:5e:86:96:dd:a6:35:52:5d:9c:3b:68:68:42:72:cf:aa:1b:
1f:7c:c5:ff:5c:c9:62:bb:f3:d7:22:09:1a:8d:cf:61:08:65:
5a:f2:33:fd:32:b5:c0:f9:41:07:c6:61:f6:b9:63:71:a6:44:
7d:16:1d:4a:68:cf:c2:29:c5:bb:23:2f:c3:5f:1a:cc:74:2d:
29:e3:89:d9:19:ec:4a:52:0d:df:d6:ca:49:a0:4d:f3:18:9a:
f6:84:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:55 2026 by rpki-client